diff -up nss/lib/cryptohi/secsign.c.keep_sha1_default nss/lib/cryptohi/secsign.c --- nss/lib/cryptohi/secsign.c.keep_sha1_default 2015-03-16 16:03:37.000000000 -0700 +++ nss/lib/cryptohi/secsign.c 2015-03-26 15:26:53.196999944 -0700 @@ -445,11 +445,11 @@ SEC_GetSignatureAlgorithmOidTag(KeyType sigTag = SEC_OID_PKCS1_MD2_WITH_RSA_ENCRYPTION; break; case SEC_OID_MD5: sigTag = SEC_OID_PKCS1_MD5_WITH_RSA_ENCRYPTION; break; + case SEC_OID_UNKNOWN: /* default for RSA if not specified */ case SEC_OID_SHA1: sigTag = SEC_OID_PKCS1_SHA1_WITH_RSA_ENCRYPTION; break; case SEC_OID_SHA224: sigTag = SEC_OID_PKCS1_SHA224_WITH_RSA_ENCRYPTION; break; - case SEC_OID_UNKNOWN: /* default for RSA if not specified */ case SEC_OID_SHA256: sigTag = SEC_OID_PKCS1_SHA256_WITH_RSA_ENCRYPTION; break; case SEC_OID_SHA384: